Ecosystem

Debian

61,817 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,228 results · Clear filters · Feed

Unscored —

CVE-2009-2044 Public exploit

Mozilla Firefox 3.0.10 and earlier on Linux allows remote attackers to cause a denial of service (application crash) vi…

cairo Debian

Jun 12, 2009
Unscored —

CVE-2009-0949 Public exploit EPSS 20%

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request…

cups Debian

Jun 9, 2009
Unscored —

CVE-2009-1959 Public exploit

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers t…

irssi Debian

Jun 6, 2009
Unscored —

CVE-2009-1960 Public exploit EPSS 32%

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote at…

dokuwiki Debian

Jun 6, 2009
Unscored —

CVE-2009-1955 Public exploit EPSS 53%

The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_da…

apr-util Debian

Jun 6, 2009
Unscored —

CVE-2009-1386 Public exploit EPSS 80%

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference an…

openssl Debian

Jun 4, 2009
Unscored —

CVE-2009-1789 Public exploit

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial o…

eggdrop Debian

May 26, 2009
Unscored —

CVE-2009-1376 Public exploit EPSS 13%

Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protoc…

pidgin Debian

May 26, 2009
Unscored —

CVE-2009-1759 Public exploit EPSS 14%

Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent…

ctorrent Debian

May 22, 2009
Unscored —

CVE-2009-1379 Public exploit EPSS 18%

Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 …

openssl Debian

May 19, 2009
Unscored —

CVE-2009-1490 Public exploit EPSS 13%

Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash…

sendmail Debian

May 5, 2009
Unscored —

CVE-2009-1443 Public exploit

Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and at…

ocsinventory-server Debian

Apr 27, 2009
Unscored —

CVE-2009-1285 Public exploit EPSS 11%

Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x b…

phpmyadmin Debian

Apr 16, 2009
Unscored —

CVE-2009-1284 Public exploit EPSS 12%

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and c…

texlive-bin Debian

Apr 9, 2009
Unscored —

CVE-2009-0796 Public exploit EPSS 30%

Cross-site scripting (XSS) vulnerability in Status.pm in Apache::Status and Apache2::Status in mod_perl1 and mod_perl2 …

libapache2-mod-perl2 Debian

Apr 7, 2009
Unscored —

CVE-2009-1210 Public exploit EPSS 15%

Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attacke…

wireshark Debian

Apr 1, 2009
Critical 9.8

CVE-2009-1151 Exploited Public exploit Scanner template EPSS 97%

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows rem…

phpmyadmin Debian

Mar 26, 2009
KEV Mar 25, 2022
Unscored —

CVE-2009-1045 Public exploit

requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) vi…

vlc Debian

Mar 23, 2009
Unscored —

CVE-2009-0858 Public exploit

The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets i…

djbdns Debian

Mar 9, 2009
Unscored —

CVE-2009-0037 Public exploit

The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts ar…

curl Debian

Mar 5, 2009
Unscored —

CVE-2008-6393 Public exploit EPSS 18%

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbit…

psi Debian

Mar 3, 2009
Unscored —

CVE-2009-0756 Public exploit EPSS 10%

The JBIG2Stream::readSymbolDictSeg function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…

poppler Debian

Mar 3, 2009
Unscored —

CVE-2009-0755 Public exploit EPSS 11%

The FormWidgetChoice::loadDefaults function in Poppler before 0.10.4 allows remote attackers to cause a denial of servi…

poppler Debian

Mar 3, 2009
Unscored —

CVE-2009-0751 Public exploit EPSS 10%

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…

yaws Debian

Mar 2, 2009
Unscored —

CVE-2009-0368 Public exploit

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data ob…

opensc Debian

Mar 2, 2009
Unscored —

CVE-2008-3076 Public exploit

The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell met…

vim Debian

Feb 21, 2009
Unscored —

CVE-2009-0360 Public exploit

Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos librarie…

libpam-krb5 Debian

Feb 13, 2009
Unscored —

CVE-2009-0542 Public exploit EPSS 74%

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL c…

proftpd-dfsg Debian

Feb 12, 2009
Unscored —

CVE-2009-0543 Public exploit EPSS 16%

ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms v…

proftpd-dfsg Debian

Feb 12, 2009
Unscored —

CVE-2009-0036 Public exploit

Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local…

libvirt Debian

Feb 11, 2009
Unscored —

CVE-2009-0490 Public exploit EPSS 17%

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audaci…

audacity Debian

Feb 10, 2009
Unscored —

CVE-2009-0478 Public exploit EPSS 72%

Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service …

squid Debian

Feb 8, 2009
Unscored —

CVE-2008-5904 Public exploit

The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rdp.c in xrdp 0.4.1 and earlier allows remote RDP servers to …

xrdp Debian

Jan 15, 2009
Unscored —

CVE-2008-5824 Public exploit

Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause …

audiofile Debian

Jan 2, 2009
Unscored —

CVE-2006-7236 Public exploit

The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, whi…

xterm Debian

Jan 2, 2009
Unscored —

CVE-2008-2382 Public exploit

The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlie…

qemu Debian

Dec 24, 2008
Unscored —

CVE-2008-5695 Public exploit EPSS 12%

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests…

wordpress Debian

Dec 19, 2008
Unscored —

CVE-2008-5660 Public exploit

Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.…

vinagre Debian

Dec 17, 2008
Unscored —

CVE-2008-5621 Public exploit

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remo…

phpmyadmin Debian

Dec 17, 2008
Unscored —

CVE-2008-5081 Public exploit EPSS 59%

The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 a…

avahi Debian

Dec 17, 2008